General

  • Target

    317b6bb9b41ca5764c90858e162c1ddd439eacaa5065234a41b2867c052fa5bb

  • Size

    438KB

  • Sample

    241107-a1rx1szrcz

  • MD5

    f458dfc00bc83cd49473e73a4b401793

  • SHA1

    2c72464669b5227cad44a9f05db6b14aec7a3912

  • SHA256

    317b6bb9b41ca5764c90858e162c1ddd439eacaa5065234a41b2867c052fa5bb

  • SHA512

    ea3a9f674b3d52f074401e6bd0b18085b6828e462575f27d05f6ae506e0558902712b55b6590e593786607472d46d86ef7125b75c7a157c861d8aef08201cef4

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      317b6bb9b41ca5764c90858e162c1ddd439eacaa5065234a41b2867c052fa5bb

    • Size

      438KB

    • MD5

      f458dfc00bc83cd49473e73a4b401793

    • SHA1

      2c72464669b5227cad44a9f05db6b14aec7a3912

    • SHA256

      317b6bb9b41ca5764c90858e162c1ddd439eacaa5065234a41b2867c052fa5bb

    • SHA512

      ea3a9f674b3d52f074401e6bd0b18085b6828e462575f27d05f6ae506e0558902712b55b6590e593786607472d46d86ef7125b75c7a157c861d8aef08201cef4

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks